91069 matches found
SUSE CVE-2026-65898
DOMPurify before 3.4.11 fails to clone the ALLOWEDATTR allowlist when setConfig is used with an uponSanitizeAttribute hook, allowing the hook to permanently mutate the shared allowlist. Attackers can register a hook that conditionally allows dangerous attributes like onerror for trusted elements,...
SUSE CVE-2026-69097
GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attackers to inject arbitrary configuration directives through malicious submodule names. Attackers can inject core.sshCommand or other dangerous config keys into the victim's .git/config via...
Photon OS 5.0: Git PHSA-2025-5.0-91-0555
An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0555. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
kernel security, bug fix, and enhancement update
6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
The vulnerabilities of the functions Repo.archive(), git.ls_remote(), Repo.iter_commits(), and Repo.blame() in the Python library for interacting with Git repositories, GitPython, allow attackers to execute arbitrary commands and overwrite arbitrary files.
The vulnerabilities of the functions Repo.archive, git.lsremote, Repo.itercommits, and Repo.blame in the Python library for interacting with Git repositories in GitPython are related to the lack of data cleaning at the control level. Exploiting these vulnerabilities could allow an attacker to...
The vulnerability of the Git configuration writing module in the Python library for interacting with Git repositories in GitPython allows a attacker to execute arbitrary code.
The vulnerability of the Git configuration writing module in the Python library for interacting with Git repositories in GitPython is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the Repo.clone_from() function in the Python library for interacting with Git repositories in GitPython allows a malicious actor to execute arbitrary code.
The vulnerability of the Repo.clonefrom function in the Python library for interacting with Git repositories in GitPython is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the go-git library, related to a countable loss of significance, allows an attacker to trigger a service failure.
The vulnerability of the go-git library is related to a countable amount of significance loss. Exploiting this vulnerability can allow an attacker to cause a service failure by using a specially created malicious .idx file...
Photon OS 5.0: Git PHSA-2025-5.0-91-0463
An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0463. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
The vulnerability of the Repo.clone_from() function in the Python library for interacting with Git repositories in GitPython allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the Repo.clonefrom function in the Python library for interacting with Git repositories in GitPython is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...
The vulnerability of the `check_unsafe_options()` function in the Python library for interacting with Git repositories, GitPython, allows a malicious actor to execute arbitrary code.
The vulnerability of the checkunsafeoptions function in the Python library for interacting with Git repositories, GitPython, is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability may allow a remote attacker to execute arbitrary code...
The vulnerability of the go-git library, related to unvalidated array indexing, allows attackers to compromise the accessibility of protected information.
The vulnerability of the go-git library is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the accessibility of the protected information...
Photon OS 5.0: Git PHSA-2024-5.0-91-0271
An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0271. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
MAL-2026-11994 Malicious code in @zzzgenesis00/web3-provider-engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae571005ccdcdc23e50fbee1eddc31d39355706b7945df3ccbb3096ecaf724b Package impersonates MetaMask's web3-provider-engine author field 'MetaMask', homepage pointing to github.com/MetaMask/web3-provider-engine while...
Malicious code in @zzzgenesis00/web3-provider-engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae571005ccdcdc23e50fbee1eddc31d39355706b7945df3ccbb3096ecaf724b Package impersonates MetaMask's web3-provider-engine author field 'MetaMask', homepage pointing to github.com/MetaMask/web3-provider-engine while...
Exploit for CVE-2026-60004
CVE-2026-60004 - Gitea Once executed, the script will automa...
Malicious code in @zzzgenesis00/crypto-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0059f996b08ee001bad27a2ec933573651b171f5b4fcde2b1e12b7a4388c7ca3 postinstall.js runs automatically on npm install and enumerates installer-owned secret material: SSH private keys under /.ssh, /.npmrc, /.gitconfig,...
MAL-2026-11529 Malicious code in @zzzgenesis00/crypto-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0059f996b08ee001bad27a2ec933573651b171f5b4fcde2b1e12b7a4388c7ca3 postinstall.js runs automatically on npm install and enumerates installer-owned secret material: SSH private keys under /.ssh, /.npmrc, /.gitconfig,...
Malicious code in @zzzgenesis00/solana-wallet-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313cd424f27cb12cf28c0ad6737c2b2d5b08ff37d8971ae65a3a0184a73d2c46 The postinstall.js script, which runs automatically on npm install, harvests a broad set of installer-owned secrets and identity data and exfiltrates...
MAL-2026-11532 Malicious code in @zzzgenesis00/solana-wallet-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313cd424f27cb12cf28c0ad6737c2b2d5b08ff37d8971ae65a3a0184a73d2c46 The postinstall.js script, which runs automatically on npm install, harvests a broad set of installer-owned secrets and identity data and exfiltrates...